Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/850961-dcfc-456c-bba6-2698f0601bb9/1/fzu2kAuaMtPRYseiWnd6yosgsnw.roa
File: fzu2kAuaMtPRYseiWnd6yosgsnw.roa (raw, json)
Hash identifier: hU1JmdLGFBz0DVJmFYAYgxR5331dWZKQ2WE5NFGouNY=
Subject key identifier: 7F:3B:B6:90:0B:9A:32:D3:D1:62:C7:A2:5A:77:7A:CA:8B:20:B2:7C
Certificate issuer: /CN=d617ad35ef270efb14271357f3a675e87566bf3a
Certificate serial: 01830F9E48A5596B38102332A9987FE8E400
Authority key identifier: D6:17:AD:35:EF:27:0E:FB:14:27:13:57:F3:A6:75:E8:75:66:BF:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hetNe8nDvsUJxNX86Z16HVmvzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/850961-dcfc-456c-bba6-2698f0601bb9/1/fzu2kAuaMtPRYseiWnd6yosgsnw.roa
Signing time: Mon 05 Sep 2022 21:46:15 +0000
ROA not before: Mon 05 Sep 2022 21:46:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8540
IP address blocks: 185.227.88.0/22 maxlen: 24
185.209.204.0/22 maxlen: 24
2a0b:4c40::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0f:9e:48:a5:59:6b:38:10:23:32:a9:98:7f:e8:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d617ad35ef270efb14271357f3a675e87566bf3a
Validity
Not Before: Sep 5 21:46:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f3bb6900b9a32d3d162c7a25a777aca8b20b27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8c:f2:17:e4:8b:db:88:20:92:a4:2c:f2:54:
77:6d:70:53:d4:a1:0c:9e:4c:ba:34:46:9b:8e:9c:
1a:ac:90:70:60:c8:3b:30:40:40:a8:88:d0:1b:68:
1e:2c:24:ba:8c:ed:bf:fb:78:28:c2:60:cd:ad:6d:
d2:7d:9d:65:1b:7f:89:eb:05:4f:b8:85:3d:a7:74:
24:5c:3c:2e:d1:e8:ae:3d:d7:60:a1:6d:92:40:4e:
13:be:24:92:03:8f:75:5b:44:e9:d8:1b:bf:89:af:
b2:5f:e1:c5:2c:99:81:37:66:4d:79:41:86:0e:5f:
86:80:4c:e2:4d:0f:f2:8c:21:f8:93:03:39:8a:9b:
50:75:79:2f:33:01:bb:94:2d:63:48:f2:67:7f:a7:
26:fa:e0:ee:c4:fc:69:69:ce:9d:ff:43:a7:2a:ad:
b1:ff:94:54:3e:e6:e4:6c:ee:64:ab:3b:92:cc:08:
26:e7:d9:c7:df:94:e5:74:89:da:ae:97:93:66:fb:
cb:ae:a8:91:e1:57:89:1e:64:6f:4d:8d:6b:cd:95:
3c:00:e8:19:c0:14:59:00:89:2a:6b:02:3b:47:b4:
3b:0f:05:cc:35:80:f0:0d:e7:ed:60:ef:06:4a:e9:
84:ec:6c:44:96:0f:b4:52:da:89:64:2c:39:4d:e9:
5e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3B:B6:90:0B:9A:32:D3:D1:62:C7:A2:5A:77:7A:CA:8B:20:B2:7C
X509v3 Authority Key Identifier:
keyid:D6:17:AD:35:EF:27:0E:FB:14:27:13:57:F3:A6:75:E8:75:66:BF:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hetNe8nDvsUJxNX86Z16HVmvzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/850961-dcfc-456c-bba6-2698f0601bb9/1/fzu2kAuaMtPRYseiWnd6yosgsnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/850961-dcfc-456c-bba6-2698f0601bb9/1/1hetNe8nDvsUJxNX86Z16HVmvzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.204.0/22
185.227.88.0/22
IPv6:
2a0b:4c40::/29
Signature Algorithm: sha256WithRSAEncryption
4b:78:56:b8:c4:3c:bf:5f:24:54:bc:30:4a:73:63:3c:b4:a0:
04:6b:e9:26:84:36:b5:52:bb:24:ea:be:a2:bb:4f:1d:0f:06:
23:90:9b:64:5d:5f:16:f0:81:1f:16:0c:d3:13:62:dc:50:33:
e8:54:98:c3:b4:5f:15:e3:cd:53:31:c6:5e:0b:8c:a1:c2:05:
f6:23:7e:3a:0a:03:f9:3a:9d:29:ca:bf:ae:7c:a2:50:6b:e4:
09:26:ae:c6:ad:6c:bf:e9:c1:5d:5b:63:6f:04:fb:cd:60:5d:
f4:19:aa:1c:3b:4a:b8:f5:a0:a5:ff:cf:6c:45:7d:ac:d7:3d:
29:7f:24:03:99:0c:97:16:23:f9:41:81:de:a0:5b:c6:8f:6f:
58:b7:07:97:0f:fc:1d:49:d9:30:55:7b:ba:84:fb:4d:37:08:
3e:a3:87:70:bc:93:57:bf:1e:8b:1e:c2:74:20:dc:bf:a4:c6:
25:be:77:9b:95:e2:d8:73:07:86:36:e4:c4:dc:3b:a6:3a:a3:
d3:93:d2:32:ed:2b:7f:1c:ab:40:32:be:10:d4:cf:3d:24:12:
41:d9:d6:12:18:0e:6c:1c:08:0f:7e:b3:6c:0e:0f:41:b4:79:
d3:b3:8c:b1:78:dc:72:ad:f1:8b:31:12:03:11:c6:bc:ac:ff:
0b:70:6e:6a
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYMPnkilWWs4ECMyqZh/6OQAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MTdhZDM1ZWYyNzBlZmIxNDI3MTM1N2YzYTY3NWU4NzU2
NmJmM2EwHhcNMjIwOTA1MjE0NjE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjNiYjY5MDBiOWEzMmQzZDE2MmM3YTI1YTc3N2FjYThiMjBiMjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApozyF+SL24ggkqQs8lR3bXBT1KEM
nky6NEabjpwarJBwYMg7MEBAqIjQG2geLCS6jO2/+3gowmDNrW3SfZ1lG3+J6wVP
uIU9p3QkXDwu0eiuPddgoW2SQE4TviSSA491W0Tp2Bu/ia+yX+HFLJmBN2ZNeUGG
Dl+GgEziTQ/yjCH4kwM5iptQdXkvMwG7lC1jSPJnf6cm+uDuxPxpac6d/0OnKq2x
/5RUPubkbO5kqzuSzAgm59nH35TldInarpeTZvvLrqiR4VeJHmRvTY1rzZU8AOgZ
wBRZAIkqawI7R7Q7DwXMNYDwDeftYO8GSumE7GxElg+0UtqJZCw5TeleZQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFH87tpALmjLT0WLHolp3esqLILJ8MB8GA1UdIwQY
MBaAFNYXrTXvJw77FCcTV/Omdeh1Zr86MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWhldE5lOG5EdnNVSnhOWDg2WjE2SFZtdnpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi84NTA5NjEtZGNmYy00NTZjLWJiYTYt
MjY5OGYwNjAxYmI5LzEvZnp1MmtBdWFNdFBSWXNlaVduZDZ5b3Nnc253LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi84NTA5NjEtZGNmYy00NTZjLWJiYTYtMjY5OGYwNjAxYmI5
LzEvMWhldE5lOG5EdnNVSnhOWDg2WjE2SFZtdnpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCudHMAwQC
ueNYMA0EAgACMAcDBQMqC0xAMA0GCSqGSIb3DQEBCwUAA4IBAQBLeFa4xDy/XyRU
vDBKc2M8tKAEa+kmhDa1Ursk6r6iu08dDwYjkJtkXV8W8IEfFgzTE2LcUDPoVJjD
tF8V481TMcZeC4yhwgX2I346CgP5Op0pyr+ufKJQa+QJJq7GrWy/6cFdW2NvBPvN
YF30GaocO0q49aCl/89sRX2s1z0pfyQDmQyXFiP5QYHeoFvGj29YtweXD/wdSdkw
VXu6hPtNNwg+o4dwvJNXvx6LHsJ0INy/pMYlvnebleLYcweGNuTE3DumOqPTk9Iy
7St/HKtAMr4Q1M89JBJB2dYSGA5sHAgPfrNsDg9BtHnTs4yxeNxyrfGLMRIDEca8
rP8LcG5q
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:42:38 2025 by rpki-client